Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File: _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier: GV9rz6rSPZtsD6vwDUrtkud5VhcIr9dqtxIvmX5SzF4=
Subject key identifier: 3B:21:1E:00:9C:11:14:5B:92:50:42:F8:E2:08:01:CC:8D:82:FE:BB
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 019A4F98F1E2032917595FC71D3AE61E9A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number: 0844
Signing time: Tue 04 Nov 2025 16:00:14 +0000
Manifest this update: Tue 04 Nov 2025 16:00:14 +0000
Manifest next update: Wed 05 Nov 2025 16:00:14 +0000
Files and hashes: 1: KFrROomQMJBnIrzsgZU84yvQLdQ.roa (hash: CshrhqcbJrkLcDCTTw3Y7CjvQ9onI+0d2hk5a/aWW9U=)
2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: lDdWV+NxyPkvI4xk5g5ZO4kbK50Gg+scx1FjEoU0wB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f1:e2:03:29:17:59:5f:c7:1d:3a:e6:1e:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Nov 4 16:00:14 2025 GMT
Not After : Nov 5 16:00:14 2025 GMT
Subject: CN=3b211e009c11145b925042f8e20801cc8d82febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:99:4d:a4:64:a7:81:9f:53:94:52:27:a1:
b5:ad:e3:2c:39:16:72:c8:ec:2e:c0:ce:71:64:af:
bf:81:f0:6d:3d:a1:e7:8f:f0:df:e4:61:ba:a5:ea:
00:bf:98:55:b4:df:b7:71:5b:9f:34:6b:95:61:ed:
59:93:2d:a7:95:49:66:c0:31:fe:e1:bc:55:2a:d5:
f6:0c:0b:ed:4d:67:19:8b:d4:08:2b:0f:b7:cd:d9:
26:98:b5:8b:13:36:05:d4:15:5a:53:ae:01:4b:c7:
4f:38:a5:59:8f:dd:72:88:f8:15:d9:4f:6e:b5:fa:
2f:e1:72:6d:39:a6:67:21:09:24:b9:1a:3d:bf:41:
c8:73:89:e6:6e:4b:5b:d9:ab:5d:c9:17:3f:b1:b6:
e7:5d:bd:1e:ad:d6:e6:45:1e:6e:18:57:34:e8:44:
c5:4f:7c:17:29:ad:44:76:e0:e8:60:44:f2:91:bc:
f6:ae:bf:f9:ee:e0:6b:e3:aa:63:4b:da:04:8e:01:
0f:b9:a5:8e:df:d0:7a:5a:5b:2e:9a:17:4a:5b:00:
09:37:47:87:9c:f5:b2:23:ab:a2:f4:59:93:c6:76:
07:2f:9c:ff:69:4a:04:75:35:20:e7:2e:a7:c6:83:
5b:d9:20:94:1c:41:4d:e9:09:34:cc:26:70:44:e6:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:1E:00:9C:11:14:5B:92:50:42:F8:E2:08:01:CC:8D:82:FE:BB
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:70:fc:ff:b9:6c:6d:63:9d:9f:26:c0:fb:84:bf:52:79:
a0:96:12:b8:46:e2:8e:9d:0c:6b:ac:f6:3e:d1:3c:5a:34:81:
15:64:84:a1:1f:be:3d:e6:14:70:17:47:1e:97:33:28:e7:69:
2e:01:6d:50:cc:05:68:1b:ee:d1:3e:80:eb:88:aa:5a:bd:30:
ca:77:a2:92:0c:9c:2d:f0:00:c7:51:0b:cb:03:07:19:2c:8d:
54:d9:a1:ec:d5:6e:4a:69:60:3f:bb:25:a8:26:e1:43:87:64:
0a:c8:cc:da:ed:98:dc:36:78:4a:d7:bb:14:da:e4:5d:01:92:
a9:1c:4d:a3:42:75:42:d9:3e:4f:78:af:f4:f7:8a:ce:d6:62:
a8:13:2c:82:e7:97:c6:b4:94:47:de:53:04:99:3a:c7:78:ab:
8f:b5:b6:53:86:46:86:13:9e:15:a7:94:dd:51:ea:53:82:5e:
83:29:9a:bf:4e:ab:1b:34:d8:b1:56:cc:87:30:79:10:9b:c8:
48:68:c7:c3:ee:5e:00:36:9c:27:f7:18:b7:1d:1d:bf:4f:ce:
09:85:5e:a8:0a:71:f2:a8:93:25:ed:9f:3b:ef:bc:02:0a:4e:
6a:90:09:d0:87:7a:61:06:13:1a:f8:b3:d4:2e:fa:c2:27:f8:
15:f8:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:31 2025 by rpki-client